8.8
CVSSv3

CVE-2016-3007

Published: 26/09/2016 Updated: 28/11/2016
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Cross-site request forgery (CSRF) vulnerability in IBM Connections 4.x up to and including 4.5 CR5, 5.0 before CR4, and 5.5 before CR1 allows remote authenticated users to hijack the authentication of arbitrary users.

Vulnerable Product Search on Vulmon Subscribe to Product

ibm connections 4.0.0.0

ibm connections 4.5.0.0

ibm connections 5.5.0.0

ibm connections 5.0.0.0